chivrs Goto Github PK

android-reverse-tool

Android reverse tool

apache-log4j-poc

Apache Log4j 远程代码执行

bypassantivirus

远控免杀系列文章及配套工具，汇总测试了互联网上的几十种免杀工具、113种白名单免杀方式、8种代码编译免杀、若干免杀实战技术，并对免杀效果进行了一一测试，为远控的免杀和杀软对抗免杀提供参考。

caesar

一个全新的敏感文件发现工具

cms-hunter

CMS漏洞测试用例集合

cve-2019-0708

Scanner PoC for CVE-2019-0708 RDP RCE vuln

cve-2019-0709

dump

cve-2021-1675

C# and Impacket implementation of PrintNightmare CVE-2021-1675/CVE-2021-34527

cve-2021-3156

cve-2021-4034

PoC for PwnKit: Local Privilege Escalation Vulnerability in polkit’s pkexec (CVE-2021-4034)

cve-2021-4035

CVE-2021-4034 1day

dictionary-of-pentesting

Dictionary collection project such as Pentesing, Fuzzing, Bruteforce and BugBounty. 渗透测试、SRC漏洞挖掘、爆破、Fuzzing等字典收集项目。

docker-webscan

Dockerized versions of various web security scanning tools and utilities

ds_store_exp

A .DS_Store file disclosure exploit. It parse .DS_Store file and download files recursively.

dvcs-ripper

Rip web accessible (distributed) version control systems: SVN/GIT/HG...

ehole

EHole(棱洞)3.0 重构版-红队重点攻击系统指纹探测工具

eva2

Another version of EVA using anti-debugging techs && using Syscalls

exploit-dictionary

eyejo

EyeJo是一款自动化资产风险评估平台，可以协助甲方安全人员或乙方安全人员对授权的资产中进行排查，快速发现存在的薄弱点和攻击面。

fingerprintjs

Browser fingerprinting library with the highest accuracy and stability.

fuzzdicts

Web Pentesting Fuzz 字典,一个就够了。

godzilla

哥斯拉

hackeronereports

Here you can find mostly all disclosed h1 reports

hacklog4j

致敬全宇宙最无敌的Java日志库！

hackutils

It is a hack tool kit for pentest and web security research.

identywaf

Blind WAF identification tool

jadx

Dex to Java decompiler

java-deserialization-exploits

A collection of curated Java Deserialization Exploits

java-memshell-scan

java-memshell-scanner

通过jsp脚本扫描java web Filter/Servlet型内存马